MAL-2025-16832 Malicious code in charlie-strawberry-edzc (npm)

The package charlie-strawberry-edzc was found to contain malicious code...

MAL-2025-34038 Malicious code in strawberry-india-banana-toqmw (npm)

The package strawberry-india-banana-toqmw was found to contain malicious code...

MAL-2025-23159 Malicious code in india-strawberry-yam-fhydd (npm)

The package india-strawberry-yam-fhydd was found to contain malicious code...

MAL-2025-31252 Malicious code in quebec-strawberry-lima-zihpp (npm)

The package quebec-strawberry-lima-zihpp was found to contain malicious code...

MAL-2025-34043 Malicious code in strawberry-kiwi-hvgp (npm)

The package strawberry-kiwi-hvgp was found to contain malicious code...

MAL-2025-34031 Malicious code in strawberry-elderberry-aiuv (npm)

The package strawberry-elderberry-aiuv was found to contain malicious code...

MAL-2025-30274 Malicious code in project-jj6w9-strawberry (npm)

The package project-jj6w9-strawberry was found to contain malicious code...

MAL-2025-28813 Malicious code in papaya-strawberry-nzps (npm)

The package papaya-strawberry-nzps was found to contain malicious code...

MAL-2025-30401 Malicious code in project-nrp5u-strawberry (npm)

The package project-nrp5u-strawberry was found to contain malicious code...

MAL-2025-34040 Malicious code in strawberry-juliet-victor-oectm (npm)

The package strawberry-juliet-victor-oectm was found to contain malicious code...

MAL-2025-30163 Malicious code in project-fsuyq-strawberry (npm)

The package project-fsuyq-strawberry was found to contain malicious code...

MAL-2025-30593 Malicious code in project-v9k8z-strawberry (npm)

The package project-v9k8z-strawberry was found to contain malicious code...

Malicious code in strawberry-1n7-project (npm)

The package strawberry-1n7-project was found to contain malicious code...

CVE-2025-22151

Strawberry GraphQL is a library for creating GraphQL APIs. Starting in 0.182.0 and prior to version 0.257.0, a type confusion vulnerability exists in Strawberry GraphQL's relay integration that affects multiple ORM integrations Django, SQLAlchemy, Pydantic. The vulnerability occurs when multiple...

CVE-2024-47082

Strawberry GraphQL is a library for creating GraphQL APIs. Prior to version 0.243.0, multipart file upload support as defined in the GraphQL multipart request specification was enabled by default in all Strawberry HTTP view integrations. This made all Strawberry HTTP view integrations vulnerable ...

CVE-2024-10019

A vulnerability in the startappserver function of parisneo/lollms-webui V12 Strawberry allows for path traversal and OS command injection. The function does not properly sanitize the appname parameter, enabling an attacker to upload a malicious server.py file and execute arbitrary code by...

CVE-2024-8898

A path traversal vulnerability exists in the install and uninstall API endpoints of parisneo/lollms-webui version V12 Strawberry. This vulnerability allows attackers to create or delete directories with arbitrary paths on the system. The issue arises due to insufficient sanitization of...

CVE-2025-22151

Strawberry GraphQL is a library for creating GraphQL APIs. Starting in 0.182.0 and prior to version 0.257.0, a type confusion vulnerability exists in Strawberry GraphQL's relay integration that affects multiple ORM integrations Django, SQLAlchemy, Pydantic. The vulnerability occurs when multiple...

Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolution

Vulnerability Summary A type confusion vulnerability exists in Strawberry GraphQL's relay integration that affects multiple ORM integrations Django, SQLAlchemy, Pydantic. The vulnerability occurs when multiple GraphQL types are mapped to the same underlying model while using the relay node...

Insufficient Type Distinction

Overview strawberry-graphql is an A library for creating GraphQL APIs Affected versions of this package are vulnerable to Insufficient Type Distinction in the relay integration that affects multiple ORM integrations Django, SQLAlchemy, Pydantic. An attacker can access unauthorized data by queryin...